100,000 More Social Security Numbers Exposed

ThinkComp writes "PayMaxx, Inc. is a web-based payroll processing company, and they recently notified me that my on-line form W-2 was available. And so it was, along with the W-2 (including SSN and salary data) of every other one-time PayMaxx customer dating back at least five years, possibly 100,000 in all. Through news.com, PayMaxx reports, 'PayMaxx has made and continues to make every effort to secure its system against any breach,' which is why part of their site has been down now for several days."

Comments

Re:Credit report monitoring

[Anonymous Coward]

required to pay for in depth fraud monitoring and credit report monitoring.

Why stop there... if my identity is stolen through the theft of their ideas; and someone cleans out my accounts the LAST thing I'm going to care about is them paying for "monitoring".

I want them to pay for the damages they caused by essentially being an accomplice to the thieves.

Sophisticated?

[kill-hup]

"No system in the world is 100 percent secure from a sophisticated and determined hacker"

I can't see what is so highly sophisticated about incrementing an ID passed as a URL parameter.

I think they are lucky to not have been visited by some real "sophisticated hackers"...

Re:Use of SSN fundamentally flawed.

[CyberLord Seven]

Social Security numbers were never intended to be identity numbers by the Federal Government.

State and local governments, businesses, and eventually the military decided that since everyone had a unique SS number, they could save themselves some money and effort by simply requiring everyone to use their SS number as an ID number.

This is an incredibly STOOPID idea that 2600 magazine has been preaching against for many years now.

In short, I'm sorry, but you are mistaken in blaming this on the government.